Privilege Escalation and Code Execution Risk in HP Security Manager
CVE-2022-46357

8.8HIGH

Key Information:

Vendor
HP
Status
HP Security Manager
Vendor
CVE Published:
30 January 2023

Summary

HP Security Manager has identified potential vulnerabilities that could be exploited by attackers to gain elevated privileges, allowing them to execute arbitrary code. This could lead to sensitive information disclosure and compromise the integrity of the system. It's essential for users to review the security measures in place and apply necessary updates to mitigate these risks.

Affected Version(s)

HP Security Manager See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_7334353-7334378-16

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.